MalwareOtherRansomwareData EncryptedIdentity (basic)Government IDFinancial accountHighContained

Brotherhood's Relief & Compensation Fund

bd_f43a3f9376d22aa7 · schema v1 · pii pii-v1

Severity

High

Discovered

Jan 3, 2021

Filed

Feb 2, 2021

To disclose

4 weeks

Affected

1,563state residents only

Linked

9 filings

Confidence

70%

Full breach record for Brotherhood's Relief & Compensation Fund →

The Brotherhood's Relief & Compensation Fund reported a ransomware cyberattack on January 3, 2021, affecting 1,563 Washington residents. Compromised data included names, addresses, DOBs, SSNs, and bank account info. The Fund engaged forensic investigators, deployed additional safeguards, and offered credit monitoring services.

J jump to incidentP pin to compareR raw source

Washington clock✓ WA AG ≤30d4 weeks discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 4 weeks / 30 days

Jan 3, 2021

Begins

Jan 3, 2021

Discovered

Feb 2, 2021

Filed

vs. sector median

4 wks faster

This filing is one of 9 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (8) · sorted by filing gap

South Carolina State AGbd_a74c380c4d808d932021-02-02Verified
Oregon State AGbd_c29575298da392e42021-02-02Verified
Massachusetts State AGbd_312d6182ca36100a2021-02-01 · +1dVerified
Indiana State AGbd_06cd6dc1bb1ef3c72021-02-05 · +3dVerified

Show 4 more filings ↓up to 32d gap

Montana State AGbd_2932afdb6b39c8b42021-02-05 · +3dVerified
Maine State AGbd_7b8b0e7aa9b1e8f12021-01-29 · +4dCandidate
California State AGbd_d39dc9af73d77ad12021-01-29 · +4dVerified
Illinois State AGbd_20f22d1cfcf3d32e2021-01-01 · +32dVerified

Name: Brotherhood's Relief & Compensation Fund
norm: brotherhood s relief compensation
Industry: Non-Profit/Charity

Name: Brotherhood's Relief & Compensation Fund
norm: brotherhood s relief compensation
Industry: Non-Profit/Charity
Industry: Otherllm

Discovered: Jan 3, 2021
Breach occurred: Jan 3, 2021
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 5, 2021
Affected individuals: 1,563state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: NameSocial Security numberFinancial account numberDate of birth
WA-stated cause: Cyberattack
WA-stated duration: lifecycle Unknowndexposure Unknownd
WA-stated discovery: Found after the fact
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial
Regulator citations: Notified Washington Office of the Attorney General

During the incident: Launched a recovery effort
Engaged a firm to conduct a forensic investigation
Extending comprehensive credit monitoring and identity protective services
Changes made: Conducted a review of system security
Deployed additional, redundant safeguards to further protect member information
Existing business relationships with several information technology providers are being reevaluated
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 4 weeks(30 days from discovery to filing)
Compliance flags: WA AG ≤30d
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 9 filings · 9 states

View merged incident ↗

Illinois State AGJan 1 · first

Maine State AG+28d

California State AG+28d

Massachusetts State AG+31d

South Carolina State AG+32d

Oregon State AG+32d

Washington State AG+32d · this page

Indiana State AG+35d

Montana State AG+35d

Pattern: first filing Jan 1 (IL), last Feb 5 (MT) — a 35-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachM10400.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 2, 2021
Raw hash: ab998ee3e2bbe96dae8a547766a4e745772306e5f1f9c115911672481a87caaa

Linked disclosures

Regulatory filings (8) · sorted by filing gap

Reporting entityBrotherhood's Relief & Compensation Fund

Victim entityBrotherhood's Relief & Compensation Fund

Incidentdiscovered Jan 3, 2021

Stated responseLaunched a recovery effort

ComplianceWA AG ≤30d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com